How we protect your mail

This page tells you how PansarPost protects your mail, so that you know what you get before you choose an email service.

• Your stored mail is encrypted with your own key. Every account has its own key pair.
• Encryption is on from the start. If you prefer that we can help you recover new mail, you can turn it off on the Recovery page.
• New mail is encrypted the moment it arrives, even when you are offline. Delivery needs only the public half of your key.
• Only your password unlocks your key. We cannot reset your password.
• Mail folders on our servers do not show your address. An administrator who sees the disk sees only random-looking folder names. From the disk alone, they cannot tell whose mail is in which folder.
• Your private key is stored under a name made from your password. This protects you against a targeted attack after a leak: somebody who gets a copy of all the keys, for example from a stolen backup or a database breach, cannot pick out your key without your password.

• OpenPGP is optional. When you turn it on, incoming mail is encrypted with your own public OpenPGP key before we store it. We never have your private key.
• The subject, the sender, the recipients and the date stay readable. Our spam filter reads the message before it is encrypted.
• For end-to-end encryption between you and another person, both of you use OpenPGP in your mail apps. Thunderbird has OpenPGP built in: see Thunderbird's OpenPGP guide. For other apps, see openpgp.org.

• Your password unlocks your mail, so we cannot get your mail back if you lose it. Save a recovery key on the Recovery page. With it, you can set a new password and keep your mail.
• If you lose your password and have no recovery key, your mail is lost.
• Turn on two-factor authentication. You get recovery codes for the day you lose your phone.

• Your mail is stored in Sweden.
• PansarPost is run by Bitstacken AB, a Swedish company.

• Your mail app and webmail always connect to us over an encrypted connection.
• Mail between PansarPost addresses never leaves our servers.
• We use our own PansarPost relays, with SMTP2GO and Amazon SES as backup routes, to improve mail delivery.

• Our website uses no tracking cookies and no third-party scripts. You can check it in your browser.
• No ads. We never sell your data. We share data only with the providers that we need to run the service, such as payment and delivery. Read our Privacy Policy.